pip-tools can create lockfiles, similar to other language package managers.